Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa
File:                     c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa (raw, json)
Hash identifier:          qby0mphvUQWxDZO6RXeZJQ+OV1e9kAl4rKIg1OdH2RI=
Subject key identifier:   F1:F2:34:C6:43:72:F3:DE:A4:72:5B:BF:85:74:4D:41:39:04:8A:40
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584E78FF7BF9D298D36C9D33CE60
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        208.70.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7b:f9:d2:98:d3:6c:9d:33:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=acd348eb-2422-4886-b2c5-2bebbc4b0c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:92:a8:f5:dc:9b:8f:d8:00:bc:75:07:52:
                    50:d3:12:b9:bd:d5:81:70:8e:3c:57:f9:26:a2:39:
                    10:69:86:a4:4f:b0:13:3c:72:6c:80:3e:77:09:3d:
                    9a:6a:48:61:ea:40:90:d7:03:94:12:28:4f:a2:be:
                    28:0a:0f:fc:58:bd:27:01:59:fc:9b:1a:38:74:d5:
                    86:84:a1:a3:9f:0c:37:02:35:74:68:01:e1:e2:e0:
                    fc:59:ce:6d:ba:08:80:03:b9:51:b7:e3:94:59:7c:
                    3d:f0:7b:1b:d3:36:8a:96:54:9b:bb:9a:11:16:2d:
                    3c:06:d2:f7:0d:d7:05:f1:28:05:00:a6:99:39:91:
                    2a:73:dd:b9:6a:2a:2a:17:fb:80:8d:20:25:9c:71:
                    3d:6f:b6:82:ab:5a:17:10:45:64:be:d7:b5:19:51:
                    5c:de:a6:03:94:a8:2a:9a:f9:37:04:6b:35:c3:b2:
                    77:be:d3:47:c6:0d:ab:b5:b4:59:9f:18:fb:f5:8f:
                    57:3a:c8:6d:6f:dc:40:3b:56:a7:b3:c1:d7:83:37:
                    19:65:1b:a4:1f:9a:6e:43:18:86:40:04:f4:ed:e5:
                    7c:74:16:b2:e0:9b:fb:e5:94:82:87:b9:8e:09:7c:
                    9e:c4:56:e8:33:df:24:6f:ec:56:35:cb:ed:74:63:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:34:C6:43:72:F3:DE:A4:72:5B:BF:85:74:4D:41:39:04:8A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:68:69:34:51:06:47:19:64:ee:75:76:0b:72:55:a2:14:
         e2:a1:86:39:5b:72:9f:f1:ed:6e:a4:c4:f1:23:59:42:22:f4:
         ed:05:43:19:17:70:0c:90:28:56:52:b8:d8:e4:35:15:fa:3a:
         bc:d4:00:b7:d4:56:65:78:30:f1:35:11:c3:fe:b5:b1:d2:41:
         3f:43:86:66:6c:da:f7:fb:59:60:de:70:2c:85:d4:ff:57:67:
         92:ec:bc:5e:6c:d1:22:ac:35:13:39:ad:75:f3:15:f1:a1:d6:
         af:fc:26:a3:ec:ef:bd:c9:46:7e:4a:bf:02:e4:f3:e3:24:2b:
         f0:21:c4:8c:0c:38:f0:3a:55:1e:74:9a:61:6e:d8:cd:60:56:
         d4:37:38:c5:35:6a:83:37:da:61:5b:07:6c:71:13:aa:4b:bc:
         5b:fd:5e:96:d0:ac:ac:f6:17:99:74:e0:b4:5e:c8:22:d7:a2:
         76:c5:f7:e6:04:b0:f5:f1:5d:70:42:ea:01:cc:63:41:a8:fd:
         65:87:c4:b6:3f:9e:0f:50:eb:23:8f:a0:d2:86:0d:81:60:00:
         b9:b2:a5:fa:47:cd:4d:6c:ec:d8:0e:97:84:2a:84:66:ef:85:
         87:ae:21:18:4e:5f:74:07:60:85:d8:60:1e:25:13:e7:ed:98:
         b2:13:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:06 2026 by rpki-client